10533 matches found
CVE-2005-3728
CVE-2005-3728 concerns Idetix Software Systems Revize CMS. The vulnerability arises because Revize CMS stores conf/revize.xml under the web document root with insufficient access control, enabling remote attackers to obtain sensitive configuration information. The NVD metrics indicate a MEDIUM ba...
CVE-2005-3699
CVE-2005-3699 affects Opera Web Browser 8.50 and 8.0–8.0.2. The issue allows remote attackers to spoof the URL shown in the status bar by manipulating the title of an image link within a form to a trusted site, directing users to a malicious site. Public details describe that the exploit involves...
CVE-2005-3715
CVE-2005-3715 affects Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839. The issue stems from the VxWorks debugger UDP port 17185 being left open without authentication, which in turn allows an attacker to access the phone OS, potentially obtain sensitive information, and cause a denial of ser...
CVE-2005-3698
PHP Easy Download (CVE-2005-3698) allows remote attackers to bypass authentication via edit.php. The connected sources (NVD, Red Hat advisory, CVE List) confirm an access-control weakness at the edit.php entry point, enabling unauthorized access. No specific exploitation details, affected version...
CVE-2005-3723
Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to 1 SNMP or 2 TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service...
CVE-2005-3720
Hitachi WirelessIP5000 VOIP WiFi Phone 1.5.6 has a vulnerable HTTP server where the default index page exposes sensitive information (e.g., software versions). Connected sources also enumerate additional issues (e.g., unauthorized HTTP server access under factory default config and SNMP/administr...
CVE-2005-3697
CVE-2005-3697 affects Uresk Links 2.0 Lite. A vulnerability in the administration interface allows remote attackers to bypass authentication via unspecified vectors in index.php. The NVD entry lists CVSS v2 base score 7.5 (network, low complexity, no auth required; partial impact on confidentiali...
[SECURITY] [DSA 902-1] New xmail packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 902-1 [email protected] http://www.debian.org/security/ Martin Schulze November 21st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 902-1] New xmail packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 902-1 [email protected] http://www.debian.org/security/ Martin Schulze November 21st, 2005 http://www.debian.org/security/faq -...
SUSE-SA:2005:065: gtk2, gdk-pixbuf
The remote host is missing the patch for the advisory SUSE-SA:2005:065 gtk2, gdk-pixbuf. The image loading library of the gdk-pixbug/gtk2 package is vulnerable to several security-related bugs. This makes every application mostly GNOME applications which is linked against this library vulnerable...
Fedora Core 4 : gtk2-2.6.10-2.fc4.4 (2005-1088)
The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug was found in the way gtk2 processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gtk2 ...
Fedora Core 3 : gtk2-2.4.14-4.fc3.3 (2005-1087)
The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug was found in the way gtk2 processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gtk2 ...
RHEL 2.1 / 3 / 4 : gdk-pixbuf (RHSA-2005:810)
Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was fou...
RHEL 3 / 4 : gtk2 (RHSA-2005:811)
Updated gtk2 packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A...
KLA10399 Multiple vulnerabilities in Winmail
Multiple serious vulnerabilities have been found in Winmail Server. Malicious users can exploit these vulnerabilities to inject scripts or overwrite local files. Below is a complete list of vulnerabilities 1. A directory traversal can be exploited remotely via a side parameter; 2. An XSS...
SUSE-SA:2005:066: phpMyAdmin
The remote host is missing the patch for the advisory SUSE-SA:2005:066 phpMyAdmin. The MySQL configuration frontend phpMyAdmin was updated to fix the following security problems which can be remotely exploited: - Multiple cross-site scripting XSS bugs CVE-2005-3301, CVE-2005-2869, PMASA-2005-5. -...
Fedora Core 4 : gdk-pixbuf-0.22.0-18.fc4.2 (2005-1085)
The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was found in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to execut...
CVE-2005-3528
CVE-2005-3528 affects TikiWiki 1.9.0–1.9.2, with a cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php exploitable via the topics_offset parameter. The issue is caused by insufficient input sanitization of that parameter, allowing remote attackers to inject arbitrary script/HTM...
CVE-2005-3695
LiteSpeed Web Server 2.1.5 is reported to be vulnerable to a reflected cross-site scripting (XSS) flaw in admin/config/confMgr.php via the m parameter. The description indicates an arbitrary script/HTML could be injected by remote attackers, but the provided documents do not specify affected vers...